Ransomware · 146 days ago
The real breach was inside the negotiation room. A ransomware negotiator with access to victims’ insurance limits and bargaining positions can help attackers set demands that fit the victim’s ceiling, which makes extortion more efficient than random pricing.
Angelo Martino pleaded guilty to working with BlackCat/ALPHV from April 2023 and to sharing information from five corporate ransomware cases, including insurance policy limits and internal negotiation positions. The Justice Department said he also conspired with others to deploy ransomware against US victims between April and November 2023, and court records tie the scheme to multimillion-dollar payments.
For defenders, the risk is not just stolen data. Any third party brought in to negotiate or respond to ransomware can become a source of leverage for the attacker, and that leverage can persist across future incidents if the same contacts, limits, and playbooks are reused.
8 sources covering this story
Ransomware Negotiator Pleads Guilty to Working For BlackCat Cyber Gang
A former ransomware negotiator has pleaded guilty to abusing his position by working with noted cybercrime group BlackCat
Ransomware Negotiator Pleads Guilty to BlackCat Scheme
A cautionary tale illustrates why the person negotiating should never be involved with any part of the ransom payment process.
Former DigitalMint ransomware negotiator pleads guilty to extortion scheme
Angelo Martino helped accomplices extort a combined $75.3 million in ransom payments from five victim companies.
Ransomware Negotiator Pleads Guilty to Aiding BlackCat Attacks in 2023
Ransomware negotiator pleads guilty to aiding BlackCat in 2023; leaked victim data enabled $1.2M extortion and $10M seizure.
Ransomware negotiator pleads guilty to helping ransomware gang | TechCrunch
A former employee of a cybersecurity firm pleaded guilty to aiding ransomware criminals to maximize their profits, with the goal of taking a cut of the ransom.
Ransomware negotiator admits role in attacks he was hired to resolve - Help Net Security
A ransomware negotiator pleaded guilty after sharing victims’ confidential data with BlackCat/ALPHV ransomware group.
Third US Security Expert Admits Helping Ransomware Gang
Angelo Martino of Florida has pleaded guilty to collaborating with the BlackCat cybercrime group while working as a ransomware negotiator.
Former ransomware negotiator pleads guilty to BlackCat attacks
companies in BlackCat (ALPHV) ransomware attacks in 2023.
Part of the PlainSec briefing for 2026-04-22